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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )KI Responsive to communication(s) filed on 28 July 2008 . 
2a )^ This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-19 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) |EI Claim(s) _M9 is/are rejected. 

7) 0 Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

3.Q Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 

1) D Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5 ) □ Notice of Informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . 



PTOL-T26 d (Rev e 08-06r 



Office Action Summary 



Part of Paper No./Mail Date 20081024 



Application/Control Number: 10/656,041 
Art Unit: 2419 



Page 2 



DETAILED ACTION 



Response to Amendment 

1. This office action is in response to the amendment filed on 7/28/2008. Claims 1-19 are 
pending in the instant application. 



Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

3. Claims 1-7, 9-15 and 17-19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Yanagidate et al (US 6128664), hereinafter referred to as Yanagidate, in view of Lee 
(US 7047561). 

Re claims 1, 9 and 17, Yanagidate discloses an address-translating device 
providing address translation between a terminal (figure 2, element 12a) with a private 
address, 10.1.1.20, located in a private network and a terminal (figure 2, element 11a) 
with a public address, 133.1 10.10.31, (first public IP address) located in a public network 
(automatically generating network address translation (NAT) data to enable a private 
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host having a private IP address to communicate with a public host having a first public 
IP address, said private host being connected to a private network, said public host being 
connected to a public network, figure 2; column 5, lines 13-20). Yanagidate discloses the 
address-translating device providing one of public addresses, 202.10.10.1 and 202.10.10- 
14, from an address translation table for communication to the terminal in the public 
network (providing address translation between the private IP address and a second 
public IP address, the second public IP address being employed as one of a source IP 
address and a destination IP address for routing the communication between the private 
host and the public host through the public network, column 5, lines 32-36). Yanagidate 
fails to disclose consulting a security policy associated with the private host to determine 
whether a communication between the private host and the public host is permissible 
before providing address translation service. Lee discloses examing an incoming and 
outgoing packets against security policies to restrict access to/from internal IP network 
(column 4, lines 22-26). It would have been obvious to one having ordinary skill in the 
art at the time the invention was made to modify the address-translating device to 
implement the packet filter of Lee so that an access to the public network would be 
restricted based on filtering rules for secure communications. 

Re claims 2 and 10, Yanagidate discloses all of the limitations of the base claim, 
but fails to disclose implementing an access list on security policy. Lee discloses using a 
packet filter with filtering rules (a security policy with an access list) (column 9, lines 17- 
21). It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to modify the address-translating device to implement the packet 
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filter with filtering rules of Lee so that an access to the public network would be 
restricted based on filtering rules for secure communications. 

Re claims 3, 1 1 and 18, Yanagidate discloses one of second public addresses 
being a shared public IP address if the communication is initiated by the private host 
(column 5, lines 59-64). 

Re claims 4, 12 and 19, Yanagidate discloses a second public address being a 
shared public IP address if the communication is initiated by the public host (column 7, 
lines 7-15). 

Re claims 5 and 13, Yanagidate discloses the address-translating device with 
address translation table (a NAT table) (figure 2, element 14c). 

Re claims 6 and 14, Yanagidate discloses sending a packet to a terminal to see if 
the terminal is reachable and removing the second public address from the address 
translation table if not reachable (detecting a removal of said private host from said 
private network; and removing, using said software, said second public IP address from 
said database responsive to said detecting said removal of said private host, column 7, 
lines 7-15). 

Re claims 7 and 15, Yanagidate discloses all of the limitations of the base claim, 
but fails to disclose a packet filter with a generic security policy. Lee discloses using a 
packet filter with filtering rules (a generic security policy) (column 9, lines 17-21). It 
would have been obvious to one having ordinary skill in the art at the time the invention 
was made to modify the address-translating device to implement the packet filter with 
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filtering rules of Lee so that an access to the public network would be restricted based on 
filtering rules for secure communications. 

Claims 8 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Yanagidate in view of Lee and further in view of Aukia et al (US 7047561), hereinafter 
referred to as Aukia. 

Re claims 8 and 16, Yanagidate and Lee disclose all of the limitations of the base 
claim, but fail to disclose automatically generating NAT data for all private hosts affected 
by said generic policy after said generic policy is modified using said software. Aukia 
discloses modifying filtering rules to be used for a packet classifier. It would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
modify the system of Yanagidate and Lee to implement the feature of modifying filtering 
rules so that modified security policy would be utilized in providing address translation 
service. 

Response to Arguments 

6. Applicant's arguments filed on 7/28/2008 have been fully considered but they are not 
persuasive. 



In response to applicant's arguments that Lee fails to disclose consulting a 
security policy associated with the private host to determine whether a communication 
between the private host and the public host is permissible by stating that Lee's filtering 
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is packet based whereas the present claimed invention uses host policy to determine 
communication permissions. The examiner respectfully disagrees. Lee's firewall 
discloses making decisions as to whether or not to pass data based upon one or more 
security policies employing a packet filter with filtering rules based on the type of packet, 
source and destination IP address of the packet, port number (security policy associated 
with a host, column 1, lines 24-28; column 4, lines 36-55). 
Therefore, the Examiner concludes that the rejection of claims is proper. 



Conclusion 



4. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the 
advisory action. In no, however, event will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 
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5. Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Hong Cho whose telephone number is 571-272-3087. 
The examiner can normally be reached on Mon-Fri during 7 am to 4 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wing Chan can be reached on 571-272-7493. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from cither Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EEC) at 866-217-9197 (toll-free). 



/Hong Cho/ 
Hong Cho 

Primary Examiner, Art Unit 2419 
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